There are extensive security rights that can be invoked, have you tried any of that yet?  You need to 1) activate the feature and assign a Supervisor password. 2) (Optionally, but highly recommended) create security Profiles or sets of rights, then 3) assign those profiles to users and define their login passwords.